Integrated: JDK-6782021: It is not possible to read local computer certificates with the SunMSCAPI provider
Mat Carter
duke at openjdk.java.net
Tue May 17 02:45:49 UTC 2022
On Tue, 12 Apr 2022 19:03:40 GMT, Mat Carter <duke at openjdk.java.net> wrote:
> On Windows you can now access the local machine keystores using the strings "Windows-MY-LOCALMACHINE" and "Windows-ROOT-LOCALMACHINE"; note the application requires admin privileges.
>
> "Windows-MY" and "Windows-ROOT" remain unchanged, however given these original keystore strings mapped to the current user, I added "Windows-MY-CURRENTUSER" and "Windows-ROOT-CURRENTUSER" so that a developer can explicitly specify the current user location. These two new strings simply map to the original two strings, i.e. no duplication of code paths etc
>
> No new tests added, keystore functionality and API remains unchanged, the local machine keystore types would require the tests to run in admin mode
>
> Tested on windows, passes tier1 and tier2 tests
This pull request has now been integrated.
Changeset: 5e5500cb
Author: Mat Carter <54955201+macarte at users.noreply.github.com>
Committer: Weijun Wang <weijun at openjdk.org>
URL: https://git.openjdk.java.net/jdk/commit/5e5500cbd79b40a32c20547ea0cdb81ef6904a3d
Stats: 187 lines in 5 files changed: 155 ins; 1 del; 31 mod
6782021: It is not possible to read local computer certificates with the SunMSCAPI provider
Reviewed-by: weijun
-------------
PR: https://git.openjdk.java.net/jdk/pull/8211
More information about the security-dev
mailing list